Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
File: 49e76bad-f289-35f2-be4e-1d132305579f.roa (raw, json)
Hash identifier: Gr/2lVtkl2fe0H6/1gFDZDyVxryrk3jhvDCcgqnXIAQ=
Subject key identifier: 8E:22:D0:EC:2F:63:98:B2:13:30:79:47:1D:2D:98:54:71:E9:51:17
Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial: 010D0C9F4328584953C448A1FB831F6EE88A8D80
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.43.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:48:a1:fb:83:1f:6e:e8:8a:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=05fdb382-35c1-4c59-8660-3736a64f3805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:7b:dc:cf:c9:87:28:3d:ea:13:35:de:fa:
89:e2:ba:79:0a:35:fc:f5:d6:22:9c:33:94:77:26:
d4:ad:21:e0:c4:9b:81:1a:4c:fb:09:88:b7:b3:2d:
df:c6:50:c7:76:7f:76:7b:db:76:b5:e4:c9:7b:1a:
b9:d7:f5:54:ec:2d:e8:0c:a9:4e:7c:f3:89:4d:e9:
d6:34:a8:52:f4:ca:ae:e0:11:49:84:22:2e:1e:a1:
5d:04:07:6a:16:9b:56:ba:3d:25:c0:3e:2a:2f:97:
46:15:cd:17:8c:2c:24:40:31:2a:23:e6:08:c1:3e:
e0:1a:7a:86:a7:62:90:8d:35:50:96:f8:1d:80:e6:
00:cf:22:4f:ba:8b:7f:55:ac:c8:85:9a:bb:d6:32:
da:87:62:7b:92:f7:50:4f:72:ce:fc:21:13:47:89:
af:53:b5:70:50:24:e2:fc:aa:d3:47:11:32:f8:ea:
d1:59:3b:a2:1f:89:0a:ac:59:47:23:1b:30:0d:6f:
22:23:dc:3b:c2:cc:8b:1b:17:d2:70:3f:fd:1d:de:
95:3d:3f:fc:09:83:3b:d5:2a:24:64:fc:32:a7:73:
99:c2:ae:ea:48:a6:3a:7d:db:25:82:f9:03:b0:9a:
4e:cd:d9:42:be:a9:2b:7d:e1:55:65:5d:94:f2:32:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:D0:EC:2F:63:98:B2:13:30:79:47:1D:2D:98:54:71:E9:51:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
X509v3 Authority Key Identifier:
keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:58:96:6c:cb:78:0d:4f:3c:bb:00:9a:97:b2:5f:ee:06:a5:
4e:28:e8:83:ef:d6:b4:b8:53:61:14:69:8a:0e:d9:bd:1c:62:
35:63:9f:c2:38:ef:20:c2:79:f6:af:12:33:df:cd:4b:55:b6:
62:2e:e4:31:82:bd:b8:5d:7a:3f:d3:cc:7a:a0:37:ab:1d:b8:
1b:3b:39:77:d2:b6:44:04:ea:a4:89:8d:5f:e0:62:f0:88:cc:
34:b1:87:69:a0:03:b1:dc:e1:27:e1:7a:12:22:c2:4e:63:b2:
a3:db:61:cb:3f:a2:2a:7b:b4:8a:b3:91:b1:f2:d0:ff:af:13:
ed:fc:66:7b:8d:21:1f:66:2b:a4:ce:5a:eb:f7:ac:ce:fb:3f:
b9:7f:a6:7c:d2:8f:19:d2:00:3c:54:ba:3b:ca:c3:9f:8c:67:
00:7b:98:dc:67:62:c2:5d:c2:8d:ea:b2:50:e3:05:4b:2d:34:
7a:10:ce:06:2f:5d:20:43:06:73:b7:fc:e5:28:77:ea:2f:19:
07:f1:ab:c4:d7:f0:3e:71:df:0c:5b:12:46:2f:90:6a:21:7c:
35:1e:99:37:0f:4b:33:0c:b6:2c:8b:86:da:2b:e5:e7:16:35:
86:d8:8f:f4:cd:da:cd:41:e5:1d:9a:c8:b3:49:40:08:14:1d:
56:3c:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:09 2025 by rpki-client